$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer File: 86b35f71-51ac-43ff-b604-cba3552c4c8c.cer (raw, json) Hash identifier: liJJEoXazH7HAOHmsQLB26MO/IgR/HrSfu4CnPzXjVY= Subject key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285843342D3D7422F78D01B80BEC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Sep 2023 00:45:23 +0000 Certificate not after: Tue 16 Dec 2025 01:45:23 +0000 Subordinate resources: AS: 46841 IP: 23.179.96.0/24 IP: 100.42.16.0/20 IP: 104.153.148.0/22 IP: 104.193.144.0/21 IP: 162.210.172.0/22 IP: 162.218.64.0/21 IP: 199.30.64.0/22 IP: 199.87.228.0/22 IP: 2604:b480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:34:2d:3d:74:22:f7:8d:01:b8:0b:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 13 00:45:23 2023 GMT Not After : Dec 16 01:45:23 2025 GMT Subject: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9b:a3:7e:e6:5d:e1:81:e7:2d:57:e2:bf:e3: eb:73:65:46:dd:cf:28:51:65:cb:49:d3:94:c9:c1: bf:7b:4d:56:9d:c2:6c:80:b4:cb:7a:2c:a0:3c:39: 90:a6:66:3b:84:ff:22:1f:08:ca:ee:cb:73:cd:ef: 10:13:58:c5:dd:ca:eb:50:b0:9e:a5:b6:b6:40:d2: 86:f6:bc:46:6a:24:4e:b7:da:77:72:5a:d1:a6:2d: f5:a4:20:66:55:6f:ed:a1:08:e3:59:a7:84:c9:98: 66:9b:b8:aa:d7:05:8b:3a:b4:73:8d:90:76:e1:81: be:5d:1e:9c:97:e3:24:8a:14:42:9c:df:3d:71:b9: d6:f5:52:c5:b3:dc:04:9b:8c:3c:4f:b4:01:e3:ee: 99:94:83:f9:0d:f3:8e:09:29:75:f7:12:e0:a7:27: 96:86:6c:d6:00:c6:37:77:48:6b:12:02:d1:1a:98: 0a:db:65:46:a6:16:85:81:fd:47:b5:92:7e:78:ec: ca:c5:82:81:6b:35:5e:84:7c:c5:12:99:a3:7e:69: fa:42:02:bc:5e:1a:4b:ff:50:90:bd:e5:a1:6a:ba: 26:a5:24:8b:4f:32:95:c3:b2:23:a3:54:1c:47:52: da:56:e3:c1:db:be:5e:1a:da:aa:35:15:66:9f:a9: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.179.96.0/24 100.42.16.0/20 104.153.148.0/22 104.193.144.0/21 162.210.172.0/22 162.218.64.0/21 199.30.64.0/22 199.87.228.0/22 IPv6: 2604:b480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a0:03:a7:4a:a4:e6:cc:e5:1a:ea:78:dc:3f:f4:a5:9e:fd: 7f:a8:4c:56:45:4e:f8:97:a2:73:20:e9:ae:fb:87:cb:89:85: 1b:0e:ee:b4:a7:63:57:93:a8:94:0c:a4:a9:34:c9:63:c1:8b: 07:de:9d:ca:7c:eb:0d:45:2f:d7:11:db:74:53:ee:cf:1f:b9: 3a:27:74:e3:a8:7a:b2:a9:10:2b:32:4c:19:9e:c9:86:e0:33: 4c:89:82:21:6b:97:5b:cf:a5:19:34:d3:20:cc:5c:b2:42:a0: 54:6f:b8:83:72:da:84:38:d7:e0:7b:0f:93:71:75:02:7b:9b: 48:1c:ac:3c:70:97:cf:d4:f0:48:1d:80:85:60:ad:a1:6e:2c: 45:a5:06:3a:2b:8e:fe:89:b1:4c:65:8d:cf:a5:5b:b8:51:8e: 3c:98:b0:24:fe:5a:07:a6:97:06:b9:52:9c:5b:89:2c:1e:ea: 89:94:be:28:39:68:16:07:b9:c3:23:16:1e:1d:84:ca:27:52: bd:6e:a3:a2:cc:67:4b:3b:4d:14:58:e9:4d:d2:22:df:34:72: 4f:e6:21:8f:08:32:49:f6:52:d6:02:5d:2f:6b:71:44:5a:41: 8d:63:30:e5:ab:9b:99:c7:06:06:9b:5d:3b:32:e1:0f:13:95: 67:f3:2f:e3 -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWEM0LT10IveNAbgL7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkxMzAwNDUyM1oXDTI1MTIxNjAxNDUyM1owLzEtMCsGA1UEAxMk ODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pujfuZd4YHnLVfiv+Prc2VG3c8oUWXLSdOU ycG/e01WncJsgLTLeiygPDmQpmY7hP8iHwjK7stzze8QE1jF3crrULCepba2QNKG 9rxGaiROt9p3clrRpi31pCBmVW/toQjjWaeEyZhmm7iq1wWLOrRzjZB24YG+XR6c l+MkihRCnN89cbnW9VLFs9wEm4w8T7QB4+6ZlIP5DfOOCSl19xLgpyeWhmzWAMY3 d0hrEgLRGpgK22VGphaFgf1HtZJ+eOzKxYKBazVehHzFEpmjfmn6QgK8XhpL/1CQ veWharompSSLTzKVw7Ijo1QcR1LaVuPB275eGtqqNRVmn6mKcwIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFGScPf7T3z1rZ7xtvOkFvMBs5hzXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg2YjM1ZjcxLTUxYWMtNDNmZi1i NjA0LWNiYTM1NTJjNGM4Yy84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUy YzRjOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAAXs2ADBARkKhADBAJomZQDBANowZADBAKi0qwD BAOi2kADBALHHkADBALHV+QwDQQCAAIwBwMFACYEtIAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDALb5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAECgA6dKpObM5RrqeNw/9KWe/X+oTFZFTviX onMg6a77h8uJhRsO7rSnY1eTqJQMpKk0yWPBiwfencp86w1FL9cR23RT7s8fuTon dOOoerKpECsyTBmeyYbgM0yJgiFrl1vPpRk00yDMXLJCoFRvuINy2oQ41+B7D5Nx dQJ7m0gcrDxwl8/U8EgdgIVgraFuLEWlBjorjv6JsUxljc+lW7hRjjyYsCT+Wgem lwa5UpxbiSwe6omUvig5aBYHucMjFh4dhMonUr1uo6LMZ0s7TRRY6U3SIt80ck/m IY8IMkn2UtYCXS9rcURaQY1jMOWrm5nHBgabXTsy4Q8TlWfzL+M= -----END CERTIFICATE-----Generated at Wed Apr 24 02:00:12 2024 by rpki-client on console-fra.rpki-client.org